Checked fact 308128 Oct 2026Safety and security
Anthropic says its policy "gives developers 90 days to patch and a further 45 days before we discuss details".
The exact words it rests on
our coordinated vulnerability disclosure , which gives developers 90 days to patch and a further 45 days before we discuss details beyond what is already included in a public advisory.
What the source said when we opened it, on 28 Oct 2026.
The source
Discovering and exploiting vulnerabilities in real-world software with Claude
Checked
Checked by the notis newsroom on , against the source above.
In the story
Anthropic's unreleased research model found five attack chains, since patched or addressed 28 Oct 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.